Certificate Transparency: Fetching of Signed Tree Heads (DRAFT)

net/cert/ct_log_verifier_nss.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <cryptohi.h>
 #include <keyhi.h>
 #include <nss.h>
 #include <pk11pub.h>
@@ skipping 45 matching lines @@
   }
 }
 
 }  // namespace
 
 CTLogVerifier::~CTLogVerifier() {
   if (public_key_)
     SECKEY_DestroyPublicKey(public_key_);
 }
 
-CTLogVerifier::CTLogVerifier()
-    : hash_algorithm_(ct::DigitallySigned::HASH_ALGO_NONE),
-      signature_algorithm_(ct::DigitallySigned::SIG_ALGO_ANONYMOUS),
-      public_key_(NULL) {}
-
-bool CTLogVerifier::Init(const base::StringPiece& public_key,
-                         const base::StringPiece& description) {
+bool CTLogVerifier::Init(const base::StringPiece& public_key) {
   SECItem key_data;
 
   crypto::EnsureNSSInit();
 
   key_data.data = reinterpret_cast<unsigned char*>(
       const_cast<char*>(public_key.data()));
   key_data.len = public_key.size();
 
   CERTSubjectPublicKeyInfo* public_key_info =
       SECKEY_DecodeDERSubjectPublicKeyInfo(&key_data);
   if (!public_key_info) {
     DVLOG(1) << "Failed decoding public key.";
     return false;
   }
 
   public_key_ = SECKEY_ExtractPublicKey(public_key_info);
   SECKEY_DestroySubjectPublicKeyInfo(public_key_info);
 
   if (!public_key_) {
     DVLOG(1) << "Failed extracting public key.";
     return false;
   }
 
   key_id_ = crypto::SHA256HashString(public_key);
-  description_ = description.as_string();
 
   // Right now, only RSASSA-PKCS1v15 with SHA-256 and ECDSA with SHA-256 are
   // supported.
   switch (SECKEY_GetPublicKeyType(public_key_)) {
     case rsaKey:
       hash_algorithm_ = ct::DigitallySigned::HASH_ALGO_SHA256;
       signature_algorithm_ = ct::DigitallySigned::SIG_ALGO_RSA;
       break;
     case ecKey:
       hash_algorithm_ = ct::DigitallySigned::HASH_ALGO_SHA256;
@@ skipping 25 matching lines @@
   SECStatus rv = VFY_VerifyDataDirect(
       reinterpret_cast<const unsigned char*>(data_to_sign.data()),
       data_to_sign.size(), public_key_, &sig_data,
       GetNSSSigAlg(signature_algorithm_), GetNSSHashAlg(hash_algorithm_),
       NULL, NULL);
   DVLOG(1) << "Signature verification result: " << (rv == SECSuccess);
   return rv == SECSuccess;
 }
 
 }  // namespace net